KsqlAuthorizationValidatorFactory¶

KsqlAuthorizationValidatorFactory is used by KsqlRestApplication to create the following REST services:

• WSQueryEndpoint
• StreamedQueryResource
• KsqlResource

Creating KsqlAuthorizationValidator¶

Optional<KsqlAuthorizationValidator> create(
  KsqlConfig ksqlConfig,
  ServiceContext serviceContext,
  Optional<KsqlAuthorizationProvider> externalAuthorizationProvider)

create creates a KsqlAccessValidator that is then used to create a KsqlAuthorizationValidatorImpl (possibly cached if enabled).

create is used when:

• KsqlRestApplication is used to build a KsqlRestApplication and then to startAsync

getAccessValidator¶

Optional<KsqlAccessValidator> getAccessValidator(
  KsqlConfig ksqlConfig,
  ServiceContext serviceContext,
  Optional<KsqlAuthorizationProvider> externalAuthorizationProvider)

getAccessValidator...FIXME

Logging¶

Enable ALL logging level for io.confluent.ksql.security.KsqlAuthorizationValidatorFactory logger to see what happens inside.

Add the following line to config/log4j.properties:

log4j.logger.io.confluent.ksql.security.KsqlAuthorizationValidatorFactory=ALL

Refer to Logging.